#17869: With RemoteUserMiddleware, users keep being logged in after web server
stops sending REMOTE_USER headers
---------------------------------+------------------------------------
     Reporter:  lamby            |                    Owner:  ptone
         Type:  Bug              |                   Status:  new
    Component:  contrib.auth     |                  Version:  master
     Severity:  Release blocker  |               Resolution:
     Keywords:                   |             Triage Stage:  Accepted
    Has patch:  1                |      Needs documentation:  0
  Needs tests:  0                |  Patch needs improvement:  0
Easy pickings:  1                |                    UI/UX:  0
---------------------------------+------------------------------------

Comment (by aaugustin):

 It would be better to use `auth.BACKEND_SESSION_KEY`, as in
 `clean_username`, than to redefine `BACKEND_SESSION_KEY` in this module.

 Otherwise, this looks good to me.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/17869#comment:15>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to